Did a search on the web for you and found a couple of things that might be
doing these scans.
Someone checking for livegate.
http://www.live.com/liveGate/stats.html
Someone checking for an Eris Server. (catalog runs on 10008)
http://filebox.vt.edu/cc/cst/documentation/
Someone checking for a RSCS service which runs on the 10000-10009 ports.
I could not find anything on new exploits myself and would like to hear if
anyone else did.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
Robert C. Wessel
Sent: Sun, May 13, 2001 11:25 PM
To: [EMAIL PROTECTED]
Subject: [FW1] Port 10008?
Is there some new (or old) trojan/worm/exploit/whatever running around that
tries to install a service on port 10008? I've had my network scanned
nearly a dozen times this weekend on that port.
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
